Xen 4.14.x/4.15.x/4.16.x/4.17.x HVM Guest allocation of resources

Summaryinfo

A vulnerability classified as problematic has been found in Xen 4.14.x/4.15.x/4.16.x/4.17.x. Impacted is an unknown function of the component HVM Guest Handler. The manipulation leads to an unknown weakness. This vulnerability is documented as CVE-2022-42333. There is not any exploit available. It is suggested to install a patch to address this issue.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Xen 4.14.x/4.15.x/4.16.x/4.17.x (Virtualization Software). This issue affects some unknown processing of the component HVM Guest Handler. Using CWE to declare the problem leads to CWE-770. The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults which would otherwise be put in place. While not exposed to the affected guests themselves, the interface specifically exists for domains controlling such guests. This interface may therefore be used by not fully privileged entities, e.g. qemu running deprivileged in Dom0 or qemu running in a so called stub-domain. With this exposure it is an issue that - the number of the such controlled regions was unbounded (CVE-2022-42333), - installation and removal of such regions was not properly serialized (CVE-2022-42334).

The weakness was released 03/21/2023. The advisory is shared at xenbits.xenproject.org. The identification of this vulnerability is CVE-2022-42333 since 10/03/2022. Neither technical details nor an exploit are publicly available.

Applying a patch is able to eliminate this problem.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Virtualization Software

Name

• Xen

Version

• 4.14.x
• 4.15.x
• 4.16.x
• 4.17.x

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion